rybbit:
  controllers:
    backend:
      type: deployment
      replicas: 1
      strategy: Recreate
      containers:
        main:
          image:
            repository: ghcr.io/rybbit-io/rybbit-backend
            tag: v2.5.0@sha256:fd00f61abe592f872a0e4ac13f8c7b190ab2810e72f898faea4809d7ced46eef
          env:
            - name: NODE_ENV
              value: production
            - name: CLICKHOUSE_HOST
              value: http://rybbit-clickhouse.rybbit:8123
            - name: CLICKHOUSE_DB
              value: analytics
            - name: CLICKHOUSE_USER
              valueFrom:
                secretKeyRef:
                  name: rybbit-config-secret
                  key: clickhouse-user
            - name: CLICKHOUSE_PASSWORD
              valueFrom:
                secretKeyRef:
                  name: rybbit-config-secret
                  key: clickhouse-password
            - name: POSTGRES_HOST
              valueFrom:
                secretKeyRef:
                  name: rybbit-postgresql-18-cluster-app
                  key: host
            - name: POSTGRES_PORT
              valueFrom:
                secretKeyRef:
                  name: rybbit-postgresql-18-cluster-app
                  key: port
            - name: POSTGRES_DB
              valueFrom:
                secretKeyRef:
                  name: rybbit-postgresql-18-cluster-app
                  key: dbname
            - name: POSTGRES_USER
              valueFrom:
                secretKeyRef:
                  name: rybbit-postgresql-18-cluster-app
                  key: user
            - name: POSTGRES_PASSWORD
              valueFrom:
                secretKeyRef:
                  name: rybbit-postgresql-18-cluster-app
                  key: password
            - name: BETTER_AUTH_SECRET
              valueFrom:
                secretKeyRef:
                  name: rybbit-config-secret
                  key: better-auth-secret
            - name: BASE_URL
              value: https://rybbit.alexlebens.dev
            - name: DISABLE_SIGNUP
              value: false
            - name: DISABLE_TELEMETRY
              value: true
            - name: MAPBOX_TOKEN
              valueFrom:
                secretKeyRef:
                  name: rybbit-config-secret
                  key: mapbox-token
          probes:
            liveness:
              enabled: true
              custom: true
              spec:
                httpGet:
                  path: /api/health
                  port: 3001
                failureThreshold: 5
                initialDelaySeconds: 10
                periodSeconds: 30
                successThreshold: 1
                timeoutSeconds: 5
          resources:
            requests:
              cpu: 10m
              memory: 200Mi
    client:
      type: deployment
      replicas: 1
      strategy: Recreate
      containers:
        main:
          image:
            repository: ghcr.io/rybbit-io/rybbit-client
            tag: v2.5.0@sha256:741908be311a23ee4e58c5f82c6740bf75bbe4f7430ff2aec420f6189b1378b8
          env:
            - name: NODE_ENV
              value: production
            - name: NEXT_PUBLIC_BACKEND_URL
              value: https://rybbit.alexlebens.dev
            - name: NEXT_PUBLIC_DISABLE_SIGNUP
              value: false
          resources:
            requests:
              cpu: 10m
              memory: 100Mi
    clickhouse:
      type: deployment
      replicas: 1
      strategy: Recreate
      containers:
        main:
          image:
            repository: clickhouse/clickhouse-server
            tag: 26.3.3@sha256:5cfbc0598ee3bd850ac1b2ab150e6c9ec7b9207f1a97617e015325fb5df053d0
          env:
            - name: CLICKHOUSE_DB
              value: analytics
            - name: CLICKHOUSE_USER
              valueFrom:
                secretKeyRef:
                  name: rybbit-config-secret
                  key: clickhouse-user
            - name: CLICKHOUSE_PASSWORD
              valueFrom:
                secretKeyRef:
                  name: rybbit-config-secret
                  key: clickhouse-password
          probes:
            liveness:
              enabled: true
              custom: true
              spec:
                httpGet:
                  path: /ping
                  port: 8123
                failureThreshold: 5
                initialDelaySeconds: 10
                periodSeconds: 30
                successThreshold: 1
                timeoutSeconds: 5
          resources:
            requests:
              cpu: 40m
              memory: 300Mi
  configMaps:
    config:
      enabled: true
      forceRename: clickhouse-config
      data:
        network.xml: |
          <clickhouse>
              <listen_host>0.0.0.0</listen_host>
          </clickhouse>
        enable_json.xml: |
          <clickhouse>
              <settings>
                  <enable_json_type>1</enable_json_type>
              </settings>
          </clickhouse>
        logging_rules.xml: |
          <clickhouse>
            <logger>
                <level>warning</level>
                <console>true</console>
            </logger>
            <query_thread_log remove="remove"/>
            <query_log remove="remove"/>
            <text_log remove="remove"/>
            <trace_log remove="remove"/>
            <metric_log remove="remove"/>
            <asynchronous_metric_log remove="remove"/>
            <session_log remove="remove"/>
            <part_log remove="remove"/>
            <latency_log remove="remove"/>
            <processors_profile_log remove="remove"/>
          </clickhouse>
        user_logging.xml: |
          <clickhouse>
            <profiles>
              <default>
                <log_queries>0</log_queries>
                <log_query_threads>0</log_query_threads>
                <log_processors_profiles>0</log_processors_profiles>
              </default>
            </profiles>
          </clickhouse>
  service:
    backend:
      controller: backend
      ports:
        http:
          port: 3001
          targetPort: 3001
    client:
      controller: client
      ports:
        http:
          port: 3002
          targetPort: 3002
    clickhouse:
      controller: clickhouse
      ports:
        http:
          port: 8123
          targetPort: 8123
  persistence:
    clickhouse:
      forceRename: clickhouse-data
      storageClass: ceph-block
      accessMode: ReadWriteOnce
      size: 10Gi
      advancedMounts:
        clickhouse:
          main:
            - path: /var/lib/clickhouse
              readOnly: false
    clickhouse-config:
      enabled: true
      type: configMap
      name: clickhouse-config
      advancedMounts:
        clickhouse:
          main:
            - path: /etc/clickhouse-server/config.d/network.xml
              readOnly: true
              mountPropagation: None
              subPath: network.xml
            - path: /etc/clickhouse-server/config.d/enable_json.xml
              readOnly: true
              mountPropagation: None
              subPath: enable_json.xml
            - path: /etc/clickhouse-server/config.d/logging_rules.xml
              readOnly: true
              mountPropagation: None
              subPath: logging_rules.xml
            - path: /etc/clickhouse-server/config.d/user_logging.xml
              readOnly: true
              mountPropagation: None
              subPath: user_logging.xml
postgres-18-cluster:
  mode: recovery
  recovery:
    method: objectStore
    objectStore:
      index: 1
  backup:
    objectStore:
      - name: garage-local
        index: 1
        destinationBucket: postgres-backups
        externalSecretCredentialPath: /garage/home-infra/postgres-backups
        isWALArchiver: true
    scheduledBackups:
      - name: live-backup
        suspend: false
        immediate: true
        schedule: "0 45 15 * * *"
        backupName: garage-local
volsync-target-clickhouse-data:
  pvcTarget: clickhouse-data
  moverSecurityContext:
    runAsUser: 101
    runAsGroup: 101
    fsGroup: 101
    fsGroupChangePolicy: OnRootMismatch
  local:
    enabled: true
    schedule: 14 11 * * *
  remote:
    enabled: true
    schedule: 14 12 * * *
  external:
    enabled: true
    schedule: 14 13 * * *